Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/iWJUN-xlQ5xwQldidmWjfS7Nc3s.roa
File:                     iWJUN-xlQ5xwQldidmWjfS7Nc3s.roa (raw, json)
Hash identifier:          X+aarieAkEuIgxxrhCZfhbL8jwNBL31QOsDR5tsyzPI=
Subject key identifier:   89:62:54:37:EC:65:43:9C:70:42:57:62:76:65:A3:7D:2E:CD:73:7B
Certificate issuer:       /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial:       0495748F
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/iWJUN-xlQ5xwQldidmWjfS7Nc3s.roa
Signing time:             Mon 04 Apr 2022 13:58:07 +0000
ROA not before:           Mon 04 Apr 2022 13:58:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50880
IP address blocks:        212.6.61.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76903567 (0x495748f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
        Validity
            Not Before: Apr  4 13:58:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=89625437ec65439c704257627665a37d2ecd737b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b1:0d:e1:a3:78:eb:42:c8:3a:3b:6f:79:d5:
                    14:c7:0e:30:a8:89:a0:40:c8:22:7e:16:b7:a3:68:
                    53:28:f6:fe:4a:7e:8c:32:4f:2a:49:02:86:d7:f7:
                    b2:94:0d:40:0e:da:a4:f9:9f:1f:90:1a:b8:b9:07:
                    c5:a3:5d:98:86:12:f5:c0:30:30:28:3b:d3:10:3d:
                    13:a7:6c:b1:dc:b3:ed:dc:48:7f:5c:3d:97:05:25:
                    1c:ca:6b:41:d4:d8:59:a7:3f:73:16:23:82:99:d6:
                    ba:08:87:45:46:99:db:45:2d:51:89:d5:6f:11:63:
                    d9:92:c4:6a:da:4d:e3:78:c7:72:bd:20:89:ad:7d:
                    df:51:71:5f:50:e3:c1:b8:68:3c:2d:c5:30:8e:c5:
                    2a:47:3e:8d:22:19:db:a7:07:b2:b8:7a:39:2b:09:
                    aa:41:7a:91:79:42:f7:6a:da:87:3c:6a:0f:1a:e1:
                    ab:bc:93:cf:a4:a8:7f:9e:83:28:3d:61:71:a0:87:
                    f8:af:06:76:b2:ef:36:93:88:af:5f:85:82:66:4e:
                    08:f8:8f:c9:c9:62:f8:de:c5:64:44:ae:9f:58:51:
                    51:77:07:de:a4:4a:b9:ea:36:8c:6f:44:f5:55:11:
                    92:84:cb:ac:fb:be:5a:b5:50:6c:64:dc:82:a3:d4:
                    3c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:62:54:37:EC:65:43:9C:70:42:57:62:76:65:A3:7D:2E:CD:73:7B
            X509v3 Authority Key Identifier:
                keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/iWJUN-xlQ5xwQldidmWjfS7Nc3s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.6.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:f6:e0:cc:09:8c:41:32:5f:8a:4c:df:37:df:17:ba:03:32:
         4f:a5:64:d7:d1:9b:1a:48:c6:0c:bf:4e:a7:3b:ee:d5:3a:da:
         28:6a:0a:30:82:77:ec:cf:46:51:23:3c:1b:b8:30:73:ee:a3:
         47:ee:ca:b4:87:d2:9c:aa:0d:54:12:80:17:91:64:da:09:51:
         fb:ff:dc:18:7f:e8:54:fe:8e:d0:0b:82:b7:ef:57:37:d3:20:
         47:9e:56:d7:12:8c:32:e1:a5:0f:bd:47:9d:45:c0:ae:ec:b8:
         1c:fb:9b:f8:0e:7a:9e:74:b5:f9:fd:e1:06:bb:e3:29:65:46:
         f7:8d:bc:37:1c:a2:b6:6b:7f:89:87:27:b7:aa:63:d9:52:c3:
         cc:c2:52:e6:91:15:f4:c0:88:83:f0:65:cb:77:d9:87:7c:ab:
         e4:34:78:58:ed:cb:a8:58:34:b8:26:a9:3c:88:fd:4d:3d:90:
         ce:1e:85:a7:db:a9:79:9c:ca:ce:2a:81:89:84:78:3c:57:d9:
         0d:e2:89:fc:11:79:32:f9:f4:23:66:18:18:46:f1:c2:86:d5:
         cd:48:c0:cc:a3:4a:6c:32:b8:e9:69:a5:d0:5a:dd:92:76:d7:
         58:3a:2c:9c:41:cc:4e:e6:02:c8:7e:42:50:45:29:f8:23:8c:
         02:b2:82:e1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBJV0jzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MWY0N2MxMWEzYTNjYWUwNmExOTI4NjBhOTZjNTA1M2VjMDRiNWRjMB4XDTIyMDQw
NDEzNTgwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODk2MjU0MzdlYzY1
NDM5YzcwNDI1NzYyNzY2NWEzN2QyZWNkNzM3YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALCxDeGjeOtCyDo7b3nVFMcOMKiJoEDIIn4Wt6NoUyj2/kp+
jDJPKkkChtf3spQNQA7apPmfH5AauLkHxaNdmIYS9cAwMCg70xA9E6dssdyz7dxI
f1w9lwUlHMprQdTYWac/cxYjgpnWugiHRUaZ20UtUYnVbxFj2ZLEatpN43jHcr0g
ia1931FxX1DjwbhoPC3FMI7FKkc+jSIZ26cHsrh6OSsJqkF6kXlC92rahzxqDxrh
q7yTz6Sof56DKD1hcaCH+K8GdrLvNpOIr1+FgmZOCPiPycli+N7FZESun1hRUXcH
3qRKueo2jG9E9VURkoTLrPu+WrVQbGTcgqPUPGcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSJYlQ37GVDnHBCV2J2ZaN9Ls1zezAfBgNVHSMEGDAWgBTh9HwRo6PK4GoZ
KGCpbFBT7AS13DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzRmUjhFYU9qeXVCcUdTaGdxV3hRVS13RXRkdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTQvOTA4MDcwLWZkOTQtNGE3NS05ODcyLTMxYzczMzE5NzA3My8x
L2lXSlVOLXhsUTV4d1FsZGlkbVdqZlM3TmMzcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQv
OTA4MDcwLWZkOTQtNGE3NS05ODcyLTMxYzczMzE5NzA3My8xLzRmUjhFYU9qeXVC
cUdTaGdxV3hRVS13RXRkdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANQGPTANBgkqhkiG9w0BAQsFAAOC
AQEAffbgzAmMQTJfikzfN98XugMyT6Vk19GbGkjGDL9Opzvu1TraKGoKMIJ37M9G
USM8G7gwc+6jR+7KtIfSnKoNVBKAF5Fk2glR+//cGH/oVP6O0AuCt+9XN9MgR55W
1xKMMuGlD71HnUXAruy4HPub+A56nnS1+f3hBrvjKWVG9428Nxyitmt/iYcnt6pj
2VLDzMJS5pEV9MCIg/Bly3fZh3yr5DR4WO3LqFg0uCapPIj9TT2Qzh6Fp9upeZzK
ziqBiYR4PFfZDeKJ/BF5Mvn0I2YYGEbxwobVzUjAzKNKbDK46Wml0FrdknbXWDos
nEHMTuYCyH5CUEUp+COMArKC4Q==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:21 2023 by rpki-client on console.sobornost.net